Veille CVE

Mardi 14 avril 2026

2 CVE sur 10

  1. CVE-2026-33824 9.8 Critique Exploitée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

  2. CVE-2026-39808 9.8 Critique Exploitée

    Fortinet FortiSandbox · Fortinet FortiSandbox PaaS

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execute unauthorized code or commands via <insert attack vector here>